Lucene search
+L

10 matches found

Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•8 views

PT-2026-68767

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.74.1 Statamic versions prior to 6.24.0 Description An authenticated Control Panel user can view content from entries they are not permitted to access, including custom field values and unpublished entries from any...

6.5CVSS5.7AI score0.00415EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/26 12:00 a.m.•6 views

CVE-2026-57912: Client-Side Enforcement of Server-Side Security

Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/23 12:00 a.m.•28 views

PT-2026-51525

Name of the Vulnerable Software and Affected Versions HCL Connections affected versions not specified Description Broken access control may allow an unauthorized user to view data in a single specific scenario. Recommendations At the moment, there is no information about a newer version that...

3.5CVSS5.8AI score0.00158EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/03/17 12:00 a.m.•26 views

Adobe Commerce License Issues Vulnerability (CNVD-2026-15169)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an authorization issue vulnerability that can be exploited by an attacker to bypass security measures and gain unauthorized viewing...

7.5CVSS5.9AI score0.0057EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/11 3:15 a.m.•18 views

CVE-2026-21289

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

7.5CVSS0.00614EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/11 2:19 a.m.•66 views

CVE-2026-21309 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

7.5CVSS0.0057EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/11 12:00 a.m.•25 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an authorization issue vulnerability that can be exploited by an attacker to bypass security measures and gain unauthorized viewing...

7.5CVSS5.8AI score0.0057EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/10 12:00 a.m.•26 views

PT-2026-24553

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4-p16 through 2.4.9-alpha3 Description Adobe Commerce is affected by an Incorrect Authorization issue that could allow a security feature bypass. An attacker could exploit this to gain unauthorized view access to da...

7.8CVSS5.8AI score0.00614EPSS
SaveExploits0References10
Mend
Mend
•added 2024/11/17 10:20 a.m.•4 views

CVE-2023-1419

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data...

8.2CVSS0.00385EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/17 12:00 a.m.•7 views

CVE-2023-1419: Improper Handling of Parameters

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data...

5.9CVSS6.1AI score0.00385EPSS
SaveExploits0References1
Rows per page
Query Builder